Australia’s cyber policy agenda is entering a crucial new phase, and this was the focus of the keynote delivered by Ashbell, Assistant Secretary for Cyber Policy at the Department of Home Affairs. Speaking to delegates, he revisited the foundations of the 2023–2030 Australian Cyber Security Strategy, a national framework launched after extensive consultation across industry and government. At the heart of that framework is a simple yet ambitious mandate: “to make Australia a world leader in cyber security by 2030.” As Ashbell reminded the audience, this vision continues to guide the development of Horizon 2 — a phase designed to refine, deepen, and strengthen the country’s cyber resilience.
A major area of focus moving forward is the support provided to small businesses and not-for-profit organisations. While significant effort in Horizon 1 was devoted to strengthening standards and awareness, the practical reality remains that smaller entities continue to struggle with time, resources, and technical capabilities. As Ashbell put it, “Information isn’t the problem — accessibility is.” Horizon 2, therefore, aims to create more usable and scalable guidance, helping micro and small organisations progress from little to no cyber capability toward clear, achievable standards without incurring unnecessary costs or administrative burdens.
Beyond organisational support, Ashbell highlighted the ongoing need to elevate cyber literacy across the wider community. Although community grants under Horizon 1 have been effective, the threat environment continues to evolve at a pace. “The message must evolve as the threat evolves,” he noted, underscoring the need for more targeted, consistent communication that strengthens Australia’s “human firewall.” Cyber awareness, he emphasised, must reach further into households, community groups, and frontline services if national resilience is to keep up with modern threats.
Another pillar shaping Horizon 2 is the emphasis on safe and secure technology — an area that has grown increasingly complex as devices, systems, and software become more interconnected. Horizon 1 advanced several initiatives, including standards for smart devices and voluntary codes for app developers. But the next phase must go further by accounting for emerging challenges in operational technology, edge devices, artificial intelligence, and post-quantum cryptography. “We need to ensure Australia is ready for emerging threats before they arrive,” Ashbell stressed, adding that the next wave of policy must anticipate vulnerabilities long before they reach critical scale.
Complementing this technological focus is a push toward more proactive cyber defence. The government is exploring frameworks that would allow industry and government to better prepare for high-impact incidents, including clearer boundaries around active cyber defence, stronger vulnerability disclosure systems, and improved mechanisms for information sharing. These areas, Ashbell explained, reflect a growing recognition that resilience is not just about response — it’s about readiness.
On the global front, the keynote reaffirmed Australia’s active leadership in regional cyber cooperation. Through programs like RAPID and forums such as the international Ransomware Initiative, the country continues to shape international norms and reduce cyber risks that cross borders. This international engagement is increasingly important, Ashbell noted, as regulatory alignment and shared defensive capabilities become essential for a secure digital economy. “We need to reduce friction for businesses while strengthening our global security posture,” he said.
Throughout his address, Ashbell repeatedly returned to one theme: partnership. He emphasized that the public–private relationship remains central to the strategy’s success and credited the industry with the goodwill, insights, and collaboration that shaped Horizon 1. “The public–private partnership is the beating heart of this strategy,” he affirmed, highlighting the government’s commitment to open co-design, ongoing consultation, and continuous dialogue.
In closing, Ashbell issued a clear challenge to everyone involved in shaping Australia’s cyber future. “When we reach the end of Horizon 2, we don’t want to look back and ask what more we could have put on the table,” he said. Instead, the goal is to enter Horizon 3 with momentum — positioned not just to catch up, but to lead. His message was simple: the door is open, the work is active, and the opportunity to shape Australia’s cyber resilience has never been more urgent.
Recommendations
Let's Chat: Beyond Human Access: Securing Machine Identities — The Next Frontier of Public Sector Cybersecurity
The Government Rubik’s Cube
IBM Launches Microsoft Practice to Deliver Transformative Business Value for Clients
Mapping your Cybersecurity Plan: Insight & Execution
